Frequently asked questions

What is an Ubuntu One account?

Ubuntu One is now the single account you use to log in to all services and sites related to Ubuntu. Your Ubuntu One account is an email address and a password that you use to sign in to Ubuntu services.

I never received my Ubuntu One verification code. Now what?

Once you complete that process, open login.ubuntu.com and log in, clicking on the "I am a returning user" option.

How do I recover or change my Ubuntu One password?

If you've forgotten your password, go to login.ubuntu.com and select the "Forgot your password?" link. This will take you through a process of recovering your password.

If you need to change your password, login to login.ubuntu.com, type your new password twice, and click the "Update" button.

Please take to account that in order to reset your password you must have access to the email address you provided. If you ever lose access to this account (email provider shuts down, hijacked accounts, etc) you won't be able to recover your password once you've lost it. That's why we strongly suggest that you provide more than one email address in your account.

Can I delete my Ubuntu One account?

You can delete your Ubuntu One account, however, there are some very important things you should know before doing that.

Your Ubuntu One account is tied to a lot of information and provides access to a variety of sites. You should understand that by deleting your Ubuntu One account, you will lose access to all those sites. Therefore, you should take care of all those accounts first, because you won't be able to reach them after.

To see which sites you will lose access to and should delete first, log in at login.ubuntu.com . It should show a list of other sites you have recently logged into via your Ubuntu One account.

N.B. If you delete your Ubuntu One account, other attached accounts will become orphaned and you will lose access to all of those sites too.

Launchpad

You can deactivate an account, but it won't be entirely deleted.

If you don't want your data there any more, we recommend that you anonymize your account before deactivating it. This can be done by changing your display name and username, removing pictures and crypto keys, etc.

To deactivate your LP account, do the following:

Go to your profile page.

Click "Change details" in the upper right.

Scroll all the way to the bottom.

Click "Deactivate your account."

If you want, type in a reason for deactivating your account.

Click "Deactivate Account".

You can also go directly to the page by typing in this address:
https://launchpad.net/~YOURUSERNAME/+deactivate-account
(replace YOURUSERNAME in the URL with the name of your account)

Other Related Accounts

For other services attached to your Ubuntu One account (such as Landscape, Ubuntu wiki sites, Ubuntu Forums and AskUbuntu), please go to those services individually to close those accounts, if possible. The Ubuntu One team cannot close those accounts for you, but many of them have self-service options.

I have questions about Two Factor Authentication (2FA) in my Ubuntu One account, where can I find more information?

I received an email saying I should change my password. Why is that?

Recently, there was a security incident on another website unrelated to Ubuntu One. Ubuntu One was not directly affected by the incident, but your Ubuntu One account is at risk because you were using the same email and password in both places.

Are Ubuntu One accounts compromised?

Ubuntu One accounts have not been directly compromised; however, if you used the same email and password on other websites, your account is at risk because an attacker might have gained knowledge of them from the information exposed by the aforementioned security incident.

To prevent potential abuse of your account, we request that you preemptively change your account's password.

What should I do?

If you received an email from us saying you should change your password, please follow the instructions in the email; follow the provided link to reset your password and make your Ubuntu One account secure again.

If you didn't receive an email but you usually reuse passwords across sites, it might be a good time to create a new one for your Ubuntu One account (pay special attention not to reuse your email account's password for other services).

What if I don't want to change my password?

If your account needs a password reset, you won't be able to log in with it until you do so. What we aim by doing this is to prevent any further access in case someone else wants to use the old login information to access your account, so basically we're protecting your account by not letting you choose a "bad" password.

How do you know my password was leaked?

The data leaked during the security breach included a list of emails and encrypted passwords. The top 100 passwords were deciphered by independent security researchers and made public online. Whenever an account included an email that was leaked, we hashed the corresponding leaked password and verified it matched the stored hashed password for that account.

Do you store my password in plain text?

No we do not. We store our account passwords in hashed form using bcrypt.

What about new users?

If a person tries to register for a new Ubuntu One account using an email and password that were leaked, we will refuse the request as long as they keep using a leaked email and password combination.

What if my email is on the leaked list but I'm using a different password?

Congratulations to you! Your account is not at risk because you used different passwords.

I want to change my password but I'm not allowed with a mention to my password being 'unsecure'

You are trying to change your account's password to one that was exposed publicly. For your protection we won't allow you to use a leaked password for your account.

I have two accounts. How can I merge them?

In general, merging two accounts means deleting one account and optionally copying some of its metadata to the other account. However, merged accounts can experience significant issues, so the Ubuntu One team strongly recommends deleting extra accounts if possible instead of merging them. This is especially relevant for merged Launchpad accounts.

Launchpad

You can merge accounts yourself, though the function for it may not be easy to find.

Follow the instructions on screen, and you should be able to merge your accounts.

Please note that merging your Launchpad accounts is very likely to break your access to Summit, AskUbuntu, any apps you have purchased in Software Center, and any third-party sites which use your Launchpad username as your login.

Ubuntu One

SSO account merges are just a matter of deleting one account then adding its email address(es) to the other account. We recommend that you do this by deleting the account you don’t need and then adding the old address(es) to the new account afterward.

Otherwise, SSO accounts must be merged manually by the support team, and it can take a while since we need to verify you own both accounts first.

Note that you will lose access to every site attached to one of the accounts, so choose carefully which account you would like to keep.

Choosing a primary account: To see which sites are attached to each account, log in to your SSO accounts one at a time at login.ubuntu.com . It should show a list of other sites you have recently logged into via that account. This list represents the sites that you will lose access to, on whichever account you merge from. The account you merge to will remain intact, though.

Merging other accounts: Before merging your SSO accounts, you should take care of any openID consumer sites or services you may have accounts on. For example, if you have two Launchpad accounts, you should manually merge those first. Then you should be ready to merge your SSO accounts.

Sending a request: If for some reason you can’t do the merge yourself, send an email to isd-support@canonical.com. Please make sure to specify the email addresses of both accounts in your message, along with acknowledgement that you don't mind losing access to everything attached to the non-primary account. Be clear about which account you want to keep, since you will lose access to the sites associated with the other account(s).

Please send the email preferably from the email address you check the most often.

After sending a message, you should get an automated reply. Please respond to this automated reply using the email address of your other SSO account, to confirm you have access to both addresses.